HNHacker News
TopNewBestAskShowJobs

tredre3

3,821 karma · joined April 22, 2022

submissionscomments
tredre3··on Firefox is now the last major browser that still supports uBlock Origin
Telemetry can be disabled in Brave. Any kind of history/bookmark syncing is opt-in.

You're just spreading FUD unless you have evidence that Brave funnels usage data in secret.

tredre3··on Firefox is now the last major browser that still supports uBlock Origin
That's not true, the on/off toggle is per-site in uBlock Origin Lite.
tredre3··on Firefox is now the last major browser that still supports uBlock Origin
You have full control of whether or not their button is in your toolbar.

If they are hidden for you, it's because you, the user, hid them or enabled the overflow extension menu.

tredre3··on RustDesk now supports true unattended remote access on Wayland
> A modern consumer GPU can crack "four random English words" in a day. [...] but arguing that that scheme is actually secure is just wrong.

Let me do just that!

This is a networked service. You send your password (or a hashed form) to it, and it validates it. You don't have the local hash to bruteforce it offline.

Even if we only consider the top 10k english words, it's 10000^4. It's going to take years to bruteforce this over a network because you'll go through so many rate-limits, cooldown periods, and outright bans that it's questionable whether it's even possible.

tredre3··on GoAccess – Open-source real-time log analyzer and interactive viewer
GoAccess supports more than combined format. I think they even support stubborn servers who output JSON logs only:

https://goaccess.io/man#custom-log

tredre3··on Codex in ChatGPT desktop app for Linux is now in preview
> Without Linux, there's no OpenAI.

They use Linux because it's there. If Linux wasn't there, they'd use what's there. There is nothing about Linux that makes it unique enough to be make or break OpenAI. Not one thing.

And yes, when a company distributes their app for the Linux desktop, we should be grateful or at the very least not hostile.

The attitude of Linux zealots is honestly tiresome and it makes us all look bad.

tredre3··on uBlock Origin is giving up the fight to keep ads off Facebook
Blocking ads is intended to prevent the ad network from tracking you. But:

1. Facebook already knows everything you see and do on facebook

2. Facebook is the ad network and serves its own ads.

Therefore blocking ads on facebook won't prevent facebook from knowing everything you do.

GP seems to have a fair understanding of the situation, care to explain why you think it's wrong?

tredre3··on Why must a socialist also be woke?
> Like, what do you mean by woke? If I'm against misogyny, racism, homophobia, etc, is that woke?

That's the usual go-to, isn't it? Forcing your opponent to define the word woke to make them look dumb/hateful.

If we want to play semantics checkers, why don't we stick with the original meaning of the word, in which case being against only one of those things would be considered woke.

tredre3··on Pixel Watch 5
> I think in this case the data is still being sent to the cloud, hence the API to fetch it.

Correct. In every case all the data is sent to the cloud. That is where the data is crunched and transformed in actual metrics. You can do the test and block the internet to the companion app. You'll see that only instantaneous data is updated (heart rate, steps), but nothing else. There is no way to use a fitbit or pixel watch without the cloud. Google eventually gets all your health information, minute by minute.

Gadgetbridge can do some things, but not many (and nothing at all for most of Google/Fitbit's products). Which is fine if all you want is HR and steps and possibly notifications, but then there is no point in paying for a smart watch, just get a fitness tracker that is cheaper and has better battery.

tredre3··on llama.cpp
If you can get away with it, you really should stick to llama-server alone. When they added support the ability to load multiple models + an idle timeout to unload them, it finally did it for me.

Adding llama-swap adds a fair amount of complexity that is unpleasant to debug and its documentation isn't very good (the only real doc is the sample config file).

tredre3··on Worms: The Future of Yesterday's Worms Today
My parents never discouraged my dreams, but they never actively procured anything to make them bloom either. Early in adulthood when I gained access on my own, I resented them for "holding me back". But then, after many more decades of growing up, I understand that getting your child an expensive computer isn't always as simple as "work extra shifts" for many parents.

I've donated money and time to volunteer programs to children computing groups but they've all been shut down during COVID. The ones that are popping back up are centered around LLMs and I'm less interested in encouraging this kind of (lack of) desire to understand computers.

tredre3··on Windows 11's built-in Weather app wastes more than 1 GB of RAM
The author doesn't need to know the difference because the task manager is accurate by default. I can still offer you some reassurance:

- The Windows task manager's memory column is the private working set which is the actual memory used by the application minus shared memory (but only shared memory that is currently shared with other processes, not merely marked shared. I.E. it's similar to RES - SHR on Linux but it's more accurate)

- Windows doesn't overcommit memory. Memory that is reserved but unused (not touching all pages) by the app is truly wasted. I mention this because in your other comment you make it clear that you think this is happening. But Windows isn't Linux.

tredre3··on The original URL for this prediction will no longer be available in 11 years (2011)
I know nothing of Safecloud, but freenet failed for a very valid reasons:

1. Data retention isn't infinite. If the source disappears from the network, peers will prune it shortly. This is exponentially true in our multimedia-heavy world.

2. Despite 1, if you actually want to delete something you published, you can't. Absolutists will see this as a good thing. Normal people will see this as a problem.

3. Peer-to-peer doesn't work in a mobile-first world, and not enough people will host nodes as a hobby. If all website publishers/hosters have to host a node, then we're just back to the current model but with extra steps.

tredre3··on The original URL for this prediction will no longer be available in 11 years (2011)
> Or they might try to be a little too clever with HTTPS upgrades.

They're not going to get any cleverer than they are now. In October we'll finally be done with heuristics or central databses of https-first websites used by the various browsers or the half a dozen of headers that you must dance around to get the upgrade to work securely and reliably. They will just default to https first.

https://blog.google/security/https-by-defau/

Yes this is about Chrome, but all others will follow.

tredre3··on Gentoo bugzilla closed due AI bot scraper overload
The genuine answer to your question is no, they are not de-facto blocked, unless the website operator chooses to do so.
tredre3··on Microsoft Edge is about to lock out older ad blockers, just like Chrome did
> Plus I'd prefer to use DNS over HTTPS instead of using unencrypted DNS.

Running unbound or a pi-hole on your network doesn't preclude that.

Your devices talks to the gateway/router/pi-hole on the network, who will then use your chosen DoH providers for upstream requests.

tredre3··on Microsoft Edge is about to lock out older ad blockers, just like Chrome did
Vivaldi is still dropping support for MV2, which means no more uBlock Origin (non-lite). Being able to side-load extensions doesn't matter if the API is gone.
tredre3··on Microsoft Edge is about to lock out older ad blockers, just like Chrome did
> Microsoft's current privacy statement also says "Depending on your settings, this browsing history is sent to Microsoft"

Edge allows to sync history (as Chrome and Firefox also do). Given that functionality, what else do you want them to say in their privacy statement..?

tredre3··on Microsoft Edge is about to lock out older ad blockers, just like Chrome did
> Unless you have an army of software engineers on par with that of Google

The main thing that is affecting adblockers with this MV2/MV3 change is the ability to dynamically block requests themselves rather than have to give a pre-computed list of patterns to the browser.

We're talking about hooking into right before http requests go out and make them fail here. Let's not pretend that maintaining this capability is out of reach for any serious fork if they actually cared. Let's also not pretend it's more than a few hours per month of dev time per month to maintain it (and most months it will be 0 hours).

And before you ask: Yes, I have worked extensively with chromium's codebase when I worked for a kiosk company.

tredre3··on A domain can now say it is for sale, in DNS
Many registrars operate as brokers for domain sales indeed (i.e. godaddy, namecheap). Then you have tlds operators with their "premium" domains that go for 1000x the regular price. Premium usually being defined as the top 10k english words and every kind of l33t spelling of sexual words.

Neither registrars nor tld operators care about squatting, even when they don't get a cut. Why would they? The squatter is paying them the same as you'd pay them.

tredre3··on _for-sale DNS records
DNS allows any character you want, including underscores. Host names in URLs cannot contain underscores. Therefore any service that create subdomains for user would reject underscores, which is why they're considered de-facto reserved for special uses in DNS. I don't think the reserved nature is codified in any RFC.
tredre3··on Humans missed 1 in 3 threats approving AI agent commands across 40k game runs
> selfhosted gitlab - there was no option to reduce password complexity for my users

Gitlab's default requirements aren't that intense, but you can make them more stringent if you want.

https://docs.gitlab.com/user/profile/user_passwords/#passwor...

I guess your goal was to allow users to have 4 character passwords, i.e. "love." which afaik you can't do.

tredre3··on Mars dust is toxic. How will future astronauts deal with it?
> Intelligence is non separable, you can't be smart in one area and be idiotic in another

This is patently false.

> if you are good at logical thinking, truth seeking, and problem solving this applies to everything you do in life.

That's how we STEM people like to see ourselves, yes. But that's rarely how it plays out. First, ego gets in the way. When someone thinks they understand something (even if it's way outside their field of expertise), they are much less likely to do the truth seeking part. So they stick to erroneous beliefs which results in them making idiotic claims.

Then you have the fact that STEM people struggle with nuance. They prefer cold simple logic. Which results in views on nuanced topics such as human behavior that are so appalling it's become a meme at this point.

Then you have the classic counter example of geniuses going off the deep end with the Nobel disease.

tredre3··on Proxmox VE now available for ARM64
> Device-tree-only single-board computers, such as the Raspberry Pi, are not supported

Good. The more software vendors require UEFI, the more arm board manufacturers will have to support it.

As an embedded developer I don't hate device-tree-only devices per se, and I have the skills to make any distro (that supports ARM) work on any board, but I absolutely do not have the patience to do it.

tredre3··on We finally learned to center a div, then browsers added sidebars
Short columns aren't (only) about overall reading speed, it's about comfort.

When you're done reading a line your eyes must move back to the start of the next line. With short lines you can still fully see the end of the previous line so it's easy to locate. It's a lot harder to do with long lines.

tredre3··on We finally learned to center a div, then browsers added sidebars
GNOME Files (nautilus) made the file property dialog a modal because they really want it to be centered relative to the file browser window and wayland didn't let them position or obtain coordinates.

The result is that you can't open open two file property dialogs at once (to compare sizes or dates or any other meta data, it's a common thing one might want to do).

Hopefully you'd agree that Wayland should allow apps to position windows relative to their own windows, at the very least.

tredre3··on IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay
> hostile entity from switching it off on unsuspecting users

I agree it's likely to prevent third parties from messing with the setting, but not hostile third parties specifically. Think of a VPN app or file sharing browser extensions who might want to disable the relay "to be helpful".

Because a truly hostile entity capable of changing local settings can already obtain the device's real IP and also capture traffic, the two things private relay is meant to prevent. There would be no point. If anything it might increase the odds of detection.

tredre3··on Microsoft Is Quietly Deleting Mentions of 32 GB RAM Recommendation for Win 11
Kind of odd an apple to oranges comparison you're making there, streaming video uses hardly any RAM.

How much RAM does CachyOS uses if you're running outlook, teams, and 6 browser tabs open?

tredre3··on Show HN: Run an 80B Qwen in 4.3 GB of RAM on a Mac, and a 35B on an iPhone
That line was authored by Claude. There you go: https://github.com/leonickson1/Swiftlet/commit/3ac64020eadcb...
tredre3··on Google fixed more Chrome bugs in June than over the past two years, thanks to AI
The question is how many new bugs were introduced through those AI fixes.

Is it less than a human would have? Is it more? Is it the same type of bugs?

I could be convinced either way and it's an interesting thing to ponder in my opinion.

← PreviousPage 4 of 34Next →